1e5fcd8445450687df2d4216d8d4afbb2a0dfea37c211c0965763b9bc1771be9 | Triage

Analysis

max time kernel
145s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 04:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

27ba9339a9564277daa1f3b9cba20891.exe
Size

66KB
MD5

27ba9339a9564277daa1f3b9cba20891
SHA1

707d79fb9bc28538252fd1a4c75c11dd80740a49
SHA256

1e5fcd8445450687df2d4216d8d4afbb2a0dfea37c211c0965763b9bc1771be9
SHA512

dc2d0fba1647bdc47b00d6de18ef9613106b9ba10dde597dca1f0b965933aab7d704ffa0acaacc480da85fa9977e6a28dea1897a5e9073de5de32fea0edb20c8
SSDEEP

1536:iFdANOCdt11rNG69oeluGuUIyFD7eUk3EZb:kAJbtuGuUB17eh

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4812	2852	WerFault.exe	14

C:\Users\Admin\AppData\Local\Temp\27ba9339a9564277daa1f3b9cba20891.exe
"C:\Users\Admin\AppData\Local\Temp\27ba9339a9564277daa1f3b9cba20891.exe"
1⤵
PID:2852
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2852 -s 152
  2⤵
  - Program crash
  PID:4812

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2852 -ip 2852
1⤵
PID:2904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2852-0-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download
memory/2852-1-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download